Encapsulating Security Payload for IP Security Suite

Features

• • • • • IPSec Bandwith up to 25.6 Gbps**
        • Support IETF RFC 4303/RFC 4301
        • AXI-Stream compatible
        • Supports all three ESP security service types: Confidentiality only, Integrity only, Confidentiality and Integrity
        • Support IPv4 or IPv6 applications
        • IPsec ESP Transport or Tunnel mode operation
        • Support for combined mode algorithms: AES-CCM (RFC 4309) and AES-GCM (RFC 5288)
        • Automatic ESP padding generation and checking.
        • Supports Traffic Flow Confidentiality padding generation.
        • Extended Sequence Number support for IKEv2 (RFC 5996) compatibility

** IPsec-ESP with fully-pipelined AES-GCM on Virtex7 XC7VX550T

Configurability

• • • • Tunable pipeline stages
      • May be supplied with any combination of ESP encryption and authentication algorithms.
      • Selectable ESP security services: Confidentiality only, Integrity only, Confidentiality and Integrity
      • Bandwidth adjustable (for tradeoff in the area)

Technology Agnostic

• • • • VHDL source code available, designed and tested for FPGA* and ASIC

* In production with customers

Example Implementation – LancsNet IPSec-ESP Engine